CVE-2026-94243 - Apache Sling Security Bundle: RefererFilter accepts weaker-than-origin evidence
Brief
CVE ID : CVE-2026-94243
Published : Sept. 23, 2026, 10:17 a. m.
- 42 minutes ago
Description : A vulnerability in Apache Sling Security Bundle: the ReferrerFilter accepts weaker-than-orgin evidence.
This issue affects Apache Sling Security Bundle: before 1.
- 2.
Users are recommended to upgrade to version 1.
- 2, which fixes the issue.
Severity: 0.0
- NA